* [GuardDog v3.2.0](https://github.com/DataDog/guarddog) – CLI tool to identify malicious PyPI, npm packages, Go modules, GitHub actions, and VSCode extensions using heuristics.

* [OpenPubkey v0.28.0](https://github.com/openpubkey/openpubkey) – Protocol leveraging OpenID Providers to bind identities to public keys through verifiable tokens.

* [Minder v0.3.0](https://github.com/mindersec/minder) – Software supply chain security platform enforcing configurable policies, attesting artifacts, and managing repository security and dependency risk.